
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a3a2f33362d3336203d3e203137393638.roa
File: 323430303a666530303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier: 3Od9SRrzUT8Ji2QsyPsFNOpsy50gg64D+EmdJGF+jiQ=
Subject key identifier: E7:99:9F:9F:2B:68:C3:76:20:13:4C:89:FC:11:13:7D:54:39:CC:EB
Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial: 396D43058E690A9C94E771F4C452AB957C2BC674
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a3a2f33362d3336203d3e203137393638.roa
Signing time: Mon 29 Jun 2026 02:46:50 +0000
ROA not before: Mon 29 Jun 2026 02:41:50 +0000
ROA not after: Mon 28 Jun 2027 02:46:50 +0000
asID: 17968
IP address blocks: 2400:fe00::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6d:43:05:8e:69:0a:9c:94:e7:71:f4:c4:52:ab:95:7c:2b:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Validity
Not Before: Jun 29 02:41:50 2026 GMT
Not After : Jun 28 02:46:50 2027 GMT
Subject: CN=E7999F9F2B68C37620134C89FC11137D5439CCEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:a3:6c:2d:de:ea:0e:d6:04:9e:b4:6b:c8:
0d:dd:72:18:bc:36:9b:96:3c:bd:4c:db:83:82:35:
c5:e3:1b:cc:6b:98:37:11:3c:ad:5f:ff:d0:87:4e:
3e:5b:66:84:bb:5f:a8:2a:91:12:56:65:da:d7:dc:
f7:99:d1:b4:fa:65:af:17:f1:a4:a1:9b:a3:de:78:
ff:1d:23:c0:f0:88:b6:22:5d:5f:dd:d7:c8:50:e1:
0f:95:c7:b6:5c:89:82:61:ad:5f:10:91:d8:be:a7:
72:ee:23:18:30:71:c6:1f:e8:77:a2:55:2c:88:42:
13:24:6c:58:89:52:54:06:ed:b9:49:17:94:3c:58:
11:b4:c7:64:ef:6e:66:82:d8:56:94:7d:0c:31:7b:
13:e7:5b:fd:3e:95:a7:ba:0e:63:33:20:7b:b4:56:
14:7c:ac:76:fe:c9:6f:98:fa:80:f3:63:b7:01:82:
4d:f3:2e:74:cb:e7:9a:a8:c9:cf:c6:88:a6:bb:5b:
55:d0:8b:c6:ca:00:7c:70:9c:8b:76:6f:6e:4b:e0:
8b:f8:42:4b:9d:11:aa:35:60:89:9b:42:4b:18:3d:
5a:25:35:85:b4:2f:7f:46:60:98:5e:d2:9d:99:cc:
8a:05:ab:f6:16:38:de:be:ae:60:96:6f:97:43:cc:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:9F:9F:2B:68:C3:76:20:13:4C:89:FC:11:13:7D:54:39:CC:EB
X509v3 Authority Key Identifier:
keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a3a2f33362d3336203d3e203137393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:fe00::/36
Signature Algorithm: sha256WithRSAEncryption
2a:90:9c:e4:4d:2f:af:05:8c:ba:2b:ac:ec:82:dd:43:7d:ba:
f4:79:8d:71:e1:6a:7b:5b:43:a7:b0:26:2d:0b:56:9e:5e:1c:
c3:e2:4c:41:50:dd:76:a9:6c:cc:fa:21:e6:cb:38:7a:9e:b1:
ec:64:c1:87:a2:84:77:c3:53:25:04:38:3b:0d:1e:8e:7f:27:
38:dd:2b:1c:21:f9:16:27:5d:4f:68:11:5a:7c:60:1e:d8:4f:
ed:ad:57:cd:41:6d:8b:33:45:42:cb:be:dc:a0:e8:de:58:2c:
47:d9:f9:e4:55:62:8a:70:b2:49:91:8c:04:9f:65:71:c7:1e:
9e:0f:82:0f:18:9e:ca:21:5c:eb:c7:42:d2:b4:23:15:e2:36:
4e:0a:42:cf:fb:7b:3f:99:f7:11:17:5b:06:0a:9d:d4:03:44:
e4:76:c1:d0:f5:bd:1c:ee:ce:3e:8a:46:8a:2a:5a:71:23:fc:
97:ce:5f:db:88:c7:0a:ce:54:61:7e:b6:d7:4b:8e:a3:98:b8:
34:90:da:f5:c5:a1:b0:9d:6c:fc:d0:18:7f:d1:42:9e:c9:2c:
e7:10:b2:59:38:17:f0:48:5f:92:55:64:81:a5:33:40:17:4f:
fc:ec:86:49:da:9e:37:e2:94:60:c3:29:9f:53:af:20:26:9e:
1f:1e:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:44 2026 by rpki-client